$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: kTwbH30CvaFSmiOUzeMmnEuDKJ4y/MCLKrLu3MawfO4= Subject key identifier: 7D:07:DC:50:6F:B9:50:62:93:72:BF:26:62:85:76:C5:F2:5A:58:AE Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 74C5CBED0EA8FC751D9514CAB31309B744A808BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 0190 Signing time: Sat 19 Jul 2025 12:51:41 +0000 Manifest this update: Sat 19 Jul 2025 12:46:41 +0000 Manifest next update: Wed 23 Jul 2025 00:32:41 +0000 Files and hashes: 1: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: iletpOTfxixHKxRms6Z2yECRzDZ4SIPJlSYEIU/u2zU=) 2: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: Qa8c3aimJWcCTS3TzTPMP2jBdFSJuucdL/N3oUiTjiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c5:cb:ed:0e:a8:fc:75:1d:95:14:ca:b3:13:09:b7:44:a8:08:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Jul 19 12:46:41 2025 GMT Not After : Jul 23 00:32:41 2025 GMT Subject: CN=7D07DC506FB950629372BF26628576C5F25A58AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:8c:f6:93:19:83:15:4c:56:1f:30:fd:16: b2:16:92:fe:2f:a3:89:e0:3e:f7:b8:c5:43:40:aa: ea:0d:c5:f2:f0:1d:9b:f6:99:25:59:30:14:b5:f7: 25:70:f4:ad:cd:5e:9f:59:73:ca:e6:fe:eb:11:40: 45:04:72:eb:d9:57:d8:04:3d:2e:0e:73:1b:20:0e: 26:4f:bb:24:cc:33:92:df:70:0c:27:6e:58:ce:38: 38:d8:89:5f:fd:7e:c3:57:6c:fd:19:97:f0:84:e1: e2:83:3b:17:b2:7a:11:d6:38:e7:97:cc:07:10:4c: 13:47:e4:5f:c4:e7:7c:36:32:8e:98:d9:cb:a5:d4: 44:1f:14:b5:d4:40:3f:aa:d5:22:2a:57:78:98:26: b6:b7:9d:09:a4:37:5d:7c:37:75:2b:a3:dc:f4:a8: 86:b0:b9:b6:40:6e:04:0e:da:ed:58:15:67:43:09: 81:80:80:c3:66:96:63:7a:f2:77:ba:cb:ff:60:fd: fd:70:35:58:84:a2:0a:64:aa:07:6b:1b:e9:a8:26: 2e:a1:f9:dc:ab:6d:d1:85:84:fc:eb:04:e6:8e:41: 70:45:0a:d3:12:b2:b5:e0:98:4d:76:bd:01:47:e4: 1d:e0:0d:1a:a9:47:41:1a:8b:56:1c:cf:2f:4c:66: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:07:DC:50:6F:B9:50:62:93:72:BF:26:62:85:76:C5:F2:5A:58:AE X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d7:26:86:49:9c:9b:66:fa:69:a1:80:6a:ad:3f:4f:3f:c2: 94:3f:3f:1f:d7:79:9a:2e:67:80:89:dd:39:40:71:9d:15:01: c4:07:1b:2a:aa:ab:f8:20:98:ee:ab:b7:ea:f8:96:95:99:f2: 39:5f:be:55:47:97:ed:8e:94:8a:4b:0f:3d:ce:62:80:44:a8: c7:43:80:0b:0a:2d:9c:a4:59:82:4b:16:9b:8b:4d:b4:9e:42: 9d:02:1e:b2:8c:99:c5:e6:25:c0:d6:cd:95:08:82:f2:e4:62: c2:dc:6e:e5:80:c6:c5:d6:88:cb:06:2c:b9:05:fd:9e:d1:b6: be:d3:6f:7f:7b:80:6f:cd:36:89:b7:bd:bb:5a:ec:71:5c:66: 3b:42:99:11:47:35:b4:2c:fd:fb:1d:5c:52:d6:88:e2:fd:c8: 4f:70:46:07:37:23:af:20:76:08:d4:0b:a7:43:ec:ff:ba:b0: 50:c3:aa:85:26:e9:74:bf:fe:c1:aa:66:64:1b:d8:3e:4e:db: 8e:82:21:27:d7:ec:b0:dc:87:83:af:cc:2c:78:88:83:4d:41: d9:c5:ed:cd:fd:f2:f0:ce:cc:8b:8a:d8:06:8f:a6:96:f5:7a: c3:e8:21:f9:5c:84:6a:8f:b0:98:b6:da:1e:a9:d2:3d:06:6c: 03:24:10:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMXL7Q6o/HUdlRTKsxMJt0SoCL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNTA3MTkxMjQ2NDFaFw0yNTA3MjMwMDMyNDFaMDMxMTAvBgNV BAMTKDdEMDdEQzUwNkZCOTUwNjI5MzcyQkYyNjYyODU3NkM1RjI1QTU4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukYz2kxmDFUxWHzD9FrIWkv4v o4ngPve4xUNAquoNxfLwHZv2mSVZMBS19yVw9K3NXp9Zc8rm/usRQEUEcuvZV9gE PS4OcxsgDiZPuyTMM5LfcAwnbljOODjYiV/9fsNXbP0Zl/CE4eKDOxeyehHWOOeX zAcQTBNH5F/E53w2Mo6Y2cul1EQfFLXUQD+q1SIqV3iYJra3nQmkN118N3Uro9z0 qIawubZAbgQO2u1YFWdDCYGAgMNmlmN68ne6y/9g/f1wNViEogpkqgdrG+moJi6h +dyrbdGFhPzrBOaOQXBFCtMSsrXgmE12vQFH5B3gDRqpR0Eai1Yczy9MZqFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQfcUG+5UGKTcr8mYoV2xfJaWK4wHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDXJoZJnJtm+mmhgGqtP08/wpQ/Px/XeZou Z4CJ3TlAcZ0VAcQHGyqqq/ggmO6rt+r4lpWZ8jlfvlVHl+2OlIpLDz3OYoBEqMdD gAsKLZykWYJLFpuLTbSeQp0CHrKMmcXmJcDWzZUIgvLkYsLcbuWAxsXWiMsGLLkF /Z7Rtr7Tb397gG/NNom3vbta7HFcZjtCmRFHNbQs/fsdXFLWiOL9yE9wRgc3I68g dgjUC6dD7P+6sFDDqoUm6XS//sGqZmQb2D5O246CISfX7LDch4OvzCx4iINNQdnF 7c398vDOzIuK2AaPppb1esPoIflchGqPsJi22h6p0j0GbAMkEMo= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:32 2025 by rpki-client